{"report_id":"426251c2-2d09-44f9-b908-7c5e09648209","version":0,"status":"done","tags":[],"date":"2026-09-11T10:01:51Z","url":{"schema":"http","addr":"robinhood-me.app/","fqdn":"robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.1.65","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"title":"HOOD ME — Find your onchain match","dom":{"size":65775,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"eaf9317f4f1661f4387bfeb1ed241cbe","sha1":"91db88c7f516b75294dd6d3d8a4d273a001c5abb","sha256":"e5a054949d85141739523f9b8790b148ff901c99df81aa2f112210f8aa57d9f7","sha512":"c0248ff5dcebb88d886fdc7f72f9ede5462239798eeefa7e3824ced32fb9079c70e7ebd19c2c4de05bd58ea5ec756abc9fadfddba70139833981f759d5bab807","ssdeep":"768:IeuAk5yGQf5eYQspIp/YUHJgUWGaVoWOtiHOCHGc7u55Uh6cmeA/4rnUsG4:GgEs0iVoiec7Ow","tlshash":"6053c633a041671cb023dda017b5af5fb198c127d51226edd7e6a926cbc7af7067220e","dom_hash":"domhash8bca8becc75af4f92246217510da6225","first_seen":"2026-09-11T10:01:58.89252Z","last_seen":"2026-09-11T10:01:58.89252Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"robinhood-me.app/","fqdn":"robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.1.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T10:01:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.robinhood-me.app","ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":210,"request_count":42,"received_data":2684172,"sent_data":21994,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":1,"received_data":24455,"sent_data":677,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":1376,"sent_data":747,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"robinhood-me.app","ip":{"addr":"216.150.16.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":1,"received_data":349,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-09-07T04:27:40.890095Z","alert_count":0,"request_count":1,"received_data":312,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-09-07T05:53:51.977806Z","alert_count":0,"request_count":1,"received_data":944,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/2792-0461c7965f4ebfcf.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de353116a85fd2a89538ba1b40f38213","sha1":"a71839930e6ecf40dbb2733d74aa21a35ef610e2","sha256":"93e12b8ef3d4c7ee153318edb0ec8743e87846c1ce0323568f1010b7c634c3b4","sha512":"52fb549585c74f597cfc0c74be67617a0b4e28426da7cee1e7ca1525942bc51027276514cfb66b3ab0c3132dfbf4d6eb9a6989622e45322504647e9893996aa2","ssdeep":"768:WXR63+n1EQsk6Gfsacp0vOLlqB0NlPRz+zXXDSc2SzwgThd:WB63+2Qsk1ap0+q+R6zXXDSc2KL","tlshash":"d41309f573d2b07657cb0049942b0005f23949ada40d403cbba45cfae4aa686e6f7f76","size":45365,"data":"","first_seen":"2026-09-11T09:58:09.700031Z","last_seen":"2026-09-11T10:01:58.912496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/1684-f96bb3cb3540cc9b.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1f3484cbd12b63f9a37424577ebfff1","sha1":"3429a80766b4721f33cc3eb47f457743092aff83","sha256":"1cb2be82c9c01ede043888dea375fe38c90aaeed2ea056b5ca6062c6fb517819","sha512":"52487cd8f950490a035163f54b43af21700a331019c2814977d67892454d23e110753c7fb32776fef2cbecfd9d91da4985c89bffa342b7222c88bb2ce0a8c56e","ssdeep":"1536:Q9A+1AVc+dJWgclHHlU0Nb8OeMCaZLoEAETRaQ3wTcXH10CZ6XCdyZXEoFUNnly2:AAW+dJW9lAMgETV3UyZCUNM/e","tlshash":"9004b8b676d0f89107a780d5843b400af3395c3b146f74a0a3e6cce975645dea1b3faa","size":176603,"data":"","first_seen":"2026-09-11T09:58:09.720727Z","last_seen":"2026-09-11T10:01:58.905488Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/9631.cd05118d1a91fe12.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad56c582db636180130465b9fe920077","sha1":"55f25680d0662d78fcfbd732d5642a47cd6b50b7","sha256":"ce7411ae63fc2d8af9eeffaf22cdee7fdabaeea42edffeaa18b37dd60614ae96","sha512":"77f2d690318b9175ebe83feceb536c47f6e63d0a4d5aab9735a2d10490305525e2a2391126f5958b6003dc0bf6fd5aa6535e81dd32dbbeb2002a17a491da625b","ssdeep":"6144:hrrRUkD/YmV2c3+YKYxRd9TcHi5icTWVTyDKKnTUiF0SXEO3XQY+Yu5VWtCpxxmg:vFDxcRycH/","tlshash":"b0a43c957376f43343da919ad42a1201f3395868140d842cf7b8ecefea9489896bff71","size":450949,"data":"","first_seen":"2026-09-11T09:58:09.697659Z","last_seen":"2026-09-11T10:01:58.922749Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/airdrop/page-632a34215c68f282.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1757d57215f3fb218004d6f46b3adb0","sha1":"702da19f342bfc5b9258c13f73d586b2d738fb99","sha256":"63499b0df43a61ffc899f41562ce28cec7d4b3d78c9e5784adf9d64c9d9f56ad","sha512":"8a4f5775a495d266d5e337d04ff5a01b31102d6907972b337d66e283ab561d5f973afa4c4c1e4f208e24da2ce0dfdc235377dce38db9e8bf5311d1d88fde6626","ssdeep":"192:A07YPfepXn6N6hRFFle/TK11Oqt37qOjTjF/GtoEaIbwNEIwarlQoqVgAzqvlxYJ:AMSEn6N6Pvlo+tGydSaWwNZjRQaoolxM","tlshash":"ec427653d8a8675cf0328edc658e47cd7399821ed50a52ade8e17d180b8b5c25ab33cf","size":12209,"data":"","first_seen":"2026-09-11T09:58:09.72616Z","last_seen":"2026-09-11T10:01:58.897278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/tasks/page-21c773e4051e07b2.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"872a10824f7cd1b57380f406a2abd914","sha1":"4e2117abbe871bbc88f9a1675b4ac7deca50ef42","sha256":"bc6cb83d4ea6461b69c050634eeece6a946020f3ce141da5ce9a17c08882cb20","sha512":"4db4942833a6d6c9227f52027b9b759aabe0ce77b605bd73dc2fdce9d87f8450a0058e71c3bfaa4021dfc644172d8f49d6038ba20d4aa6290f33c2fdd9e99676","ssdeep":"384:SL5T8c9YNLQL5ThEZOrm5k6JvDV2fMwTSLM3BA48p5:8Y4JrCkCvDVuBA7P","tlshash":"9082b837d0912b5c70369ca40789ce7db29e4626992dc2e499f53c2607cf1dbba6238d","size":19278,"data":"","first_seen":"2026-09-11T09:58:09.701291Z","last_seen":"2026-09-11T10:01:58.926041Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/7006.44423e216b256764.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14b09b0c0bcf7eb3ca4e43267c788c3e","sha1":"8116ec1a975194de0dee4de82363b5b5197edaf4","sha256":"4d347b1b905683ed8693d2f1e7d2650cc12e121532e1327a507b810c4b2eab9e","sha512":"c8a4eecea9e31b195c9d31e4a4404c627e380b8dd15d75521980c59ba92127a5c952db67a1880820edbc34ac8890e6f3bf8f0672f627f4dcf82628447074acb5","ssdeep":"6144:btcTq9FLELpZcgU12qS5C6p3ycaN+GMH00M0zkz9sLrLoRRqH9GPQv8rKARbyMPs:+YuyV4oKmiTlckDLSnfHZ0ZyIzjB","tlshash":"60b45c517376f436039b819ea8a92201f2345899141a803dfbfcacebdf8498555bff72","size":505797,"data":"","first_seen":"2026-09-11T09:58:09.744283Z","last_seen":"2026-09-11T10:01:58.911197Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/7285-02240f78a6d16017.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47ff47ce9acd0ce7ad27077e5427c761","sha1":"a5c32d07b4c8aa79277aae799ef6834c74e9bfbf","sha256":"52f2d76a7c2cef902bd3d50f3c23cf45b0000a5e2c62ce0a186af06685aeecf2","sha512":"8a1dcf60c64c317aa4633270dddcb40ef69fdb484752d722b72648b21de078ab31b5853f4979a31034c1350feb06ecac9dadc16b9d4ccd75979c71d879fda5d9","ssdeep":"96:EK8yGLcyrObL4XI6cGt9mgQOlMqHAMdrQuXNgyZ1y26Tyk/hmnSriMfk5wgagrWI:a1L9rOmIi99rMSVy26Tyk/hmnSk54Oj","tlshash":"19f12ab9c382335077a601e615092159f37e0561e5280a7836a3bc2077669ccf7f1bdf","size":7695,"data":"","first_seen":"2026-09-11T09:58:09.743324Z","last_seen":"2026-09-11T10:01:58.907935Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31fb9473e341a5d2d9074487720979ed","sha1":"41c95895596e18c5cdb3bfa7817f5ff744a329a3","sha256":"a29298d9333371dd939efc222616a3dec4889cbf1691c2acb4e33962e65ecb32","sha512":"69d02f801e26cf342d19306568dfc86bf25bf955d605300230a3200a2ccd820f2ca827334086f1ebcc47ca58439375af6844844fde58254ec8e2f168728d50b9","ssdeep":"","tlshash":"b4f097caf2211ce223f3b03a4d5a2160523794df3589e63e1031e9008c3e90f931be8a","size":481,"data":"","first_seen":"2026-09-11T09:58:09.745356Z","last_seen":"2026-09-11T10:01:58.926672Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-09-11T14:25:33.490951Z","times_seen":54919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-09-11T14:26:44.721888Z","times_seen":256704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ea95b303ae9054eb7026037dd541b75","sha1":"c842608fb90dce9c252ffe91c85d0fe07196fc62","sha256":"99cb5cca29efe0ad3e48918a367105c0c81aaea56b3973eeded7075578d7c140","sha512":"b402d843d35712be83f9bba7c0c703893f59dea5f65206d6c78fcefed705ec7984ccf34ffd5532734787d827b7289badb6bb0d9428156224d4eb2d3a34a7897d","ssdeep":"","tlshash":"4e413d4bb0dafd01a9cdc87741bb2eb622e9c5359a26f03f573fa44b141c06a5a0921b","size":2181,"data":"","first_seen":"2026-09-11T09:58:09.747693Z","last_seen":"2026-09-11T10:01:58.928392Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2ff189a50e4ebd418ef87d754bbbd9a","sha1":"018599bbe1475f85c8c456e2ca4c1659a5164981","sha256":"87a708e41ac5afe3be6f8bd4d0980c6c7c13ce13f5da5282f2ca776828cb2b41","sha512":"79ec36c2bfff8aaa8567ceebe96fbb1dc4679781185679a235cca569480527c5c64d865d7af821194d88590754001a2a294da8a8849a8578af40f8ed2254e023","ssdeep":"","tlshash":"d7217b0bf0d9fd01a95ccc7bd1b72eb520eac6358256b53f973f655b210c06b5a0821a","size":1172,"data":"","first_seen":"2026-09-11T09:58:09.748724Z","last_seen":"2026-09-11T10:01:58.929015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0c5a5f6085d12a182afe223bc00c588","sha1":"8b63471b36c65ebf005f9e67b737f5b336ffad0b","sha256":"0b30c6068c9b63efa41ccf1261b78e6d1d53c01dfcae2b9b60ecc07a6bc56063","sha512":"f7c27dd0bee57e41092ebc41fc3e65c95d639966a4b83465482e72b7db5c7859dd48d87fec622251ad6cb1e0757f3142cc866d60bfaa1a64f3edd0ae781c55f5","ssdeep":"","tlshash":"3e61dc2d6008dd4ffdae7c29057ead3a10de45af03d5deb88698de000e8647a6797dc1","size":3469,"data":"","first_seen":"2026-09-11T09:58:09.749875Z","last_seen":"2026-09-11T10:01:58.929626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b02d0d7b29ac7ae111d005e726df7de","sha1":"b53f0fc978691dead2e88a78d8664f88a82db1a4","sha256":"93605140c2a6aa74ff7dd95820900cbca9d0d83b0e7652d71ace1ae8071c96db","sha512":"b8b05b39a69ed251d76839db412968a808af99d914e2eea0801a88adf1ae927b07e0642396b2a9ea3b6cf775c26b0ca9478cbaed22040619ce90faaaaa50e2ab","ssdeep":"","tlshash":"5ad05b39a004dd66bc1a7546183ded3b105d548f0455dd6427c4cd144992a3a3302dd1","size":252,"data":"","first_seen":"2025-10-16T04:05:32.985205Z","last_seen":"2026-09-11T10:01:58.930454Z","times_seen":536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1aff0998bf170dae9b47b137424bde0f","sha1":"c7ecb6ee0f0f216c97144f6c214b4f31bc85e663","sha256":"e36ded9369ff5d14d8d38ef8a685cc862eee64633209c3362dc57c8bb407a1e0","sha512":"67f54e6c86b336b32dcda19911605cb75d83638b8dc232c6b2f8f1355c309c2ac6b65e663f0ae2121c2d490861861e9fd057ce4c136337dff7e2dadd082d27c9","ssdeep":"","tlshash":"c0800470c0400c15d431405314341105017d400d0100470053505f4470111055505dcf","size":34,"data":"","first_seen":"2023-10-28T22:44:11Z","last_seen":"2026-09-11T10:01:58.930964Z","times_seen":1956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c86603af5027152ebc6950870527a99d","sha1":"0a89a612cadcf1e512ddb8b0e12d5140581736d8","sha256":"b11c52871c549f0066ed8a35a20d5b4b5b165c60a73dba3f434ab248cbbad57e","sha512":"38595f29971218aaa1802d4e144be4409b23719aac2ebd6ea565c158a2a078f1415c99fee36c0247a702bf40b349d2d5c6b4ecd36234076c2a9e61aecde0b813","ssdeep":"","tlshash":"46c0c0d0dc02cc2cc3674f221c3b0c3921ccc56503054146ddc5cd281981b3405b1dc9","size":186,"data":"","first_seen":"2025-05-17T12:26:13.73243Z","last_seen":"2026-09-11T10:01:58.931455Z","times_seen":502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5167e2d53d69b5861b51d4cff68f8f7d","sha1":"24c0c0868cabeb81be420363c76460db0069102c","sha256":"d73522c817a1999d5f061d19be561484ad5a888f0b2be338040ee2567014d9d9","sha512":"29e99305c37513615f1f58f8fb4b4a2cc0c9013d57602ea332153af72e6551c9aef691c5deba7465736a58b26dbdbbd8f74f993bf0bcdd00337afa4a6f063254","ssdeep":"","tlshash":"8f312aa3ed05dd01c7da9e18197f7db424cac3a3c155505ba78ccd3885839746df0aa2","size":1762,"data":"","first_seen":"2026-09-11T09:58:09.753724Z","last_seen":"2026-09-11T10:01:58.932475Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/main-app-d41d56f775a954bb.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"414540b9292b7b7033e3181891eb3123","sha1":"72d64b9ff282371843b56ad7dd1fc9f21886aea7","sha256":"d1aaa16fccf97b73a68c8d0cc6de16c4e49e29dfd4e5bd675f6c37465fd9a569","sha512":"aa79e160fec24d63a04754d192b181963fafc01482815f52325daa92dcba9c11a20bbc606258c82a2c534cc2ead5539770c2c80681c311811f267cd1efebd399","ssdeep":"","tlshash":"f7f0f4aa5f0df42f1c26ae74fd97ace2285f4175202b4e647901eda53c27face260418","size":534,"data":"","first_seen":"2025-05-06T10:44:19.333955Z","last_seen":"2026-09-11T10:01:58.925305Z","times_seen":648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/9089-371960bfcede7c5c.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cc9d14d35ae342cbea4cf4133cc5363","sha1":"abf30a141c6fe7a0155f2ba65279231043bf8e06","sha256":"ac0f1811656c4a3a95de68140068123b29b1406f58c75dc1f57162a295236350","sha512":"4fb4003fd773ba2dd1d2a2371c4dab7a4f269f7e6a0d5e532713c22e7d4412717455da1d90c1a513ee59e222fed3c1b5b7e0bed4e9d1e8b0eb6ff51f33c252c6","ssdeep":"1536:gbEfb5Vp7zGrsq9uPqP5doP5ARrplmzu4gxquYZttMEPnNsxNK+HO:HJqIqhI5q1xqVFH","tlshash":"eca30aa57b1075faded29595641f2050f139f892a18d005c72a8f8f72beacc899def30","size":106115,"data":"","first_seen":"2026-09-11T09:58:09.730003Z","last_seen":"2026-09-11T10:01:58.920003Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/layout-37d3a36d368accf8.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdfa28f5b9874822858612962bd66872","sha1":"c4e25cc5bf315c4388f5d5a47de0b4a3db51c7dd","sha256":"9b3f07ac6e9199db454bf17f7d798b9ca028297b55e181bc57949d013ff2115f","sha512":"0b0815a987c826d0769cdc4c37a608dc9469157b4fffb27672718d6d02eeffda6bb2f5e6f07b3a6634f61cab512f71896e0694aa3c7d03fe20eb823553d88dda","ssdeep":"384:YB214WNJY1YQssmrD7yxL5TbcX5/LQL5TRJmouyYnw:YU14WNK1YQsVr75O0oDYnw","tlshash":"63a21b2682513fb4b02b3c809f4e5f4db19d5016c65989e5e8a59c1603d7ae0f2f2fde","size":21496,"data":"","first_seen":"2026-09-11T09:58:09.721899Z","last_seen":"2026-09-11T10:01:58.918282Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/7997-90952b05ffd0b005.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0964050aca125d2bfb75fe21e63d81c2","sha1":"7a22a816f3e1ec834fa24ad1d168ea0aa838fb2e","sha256":"d0ecdcf27af384cb19584b2ca2ecd96feb0b89b3d32c4eb9b1e2ea892ca89b1a","sha512":"c3436419aa4eaf1f9a54d0b4eab324add76547d437b30eff323f58ab25e520fb0bff293b0bc2a9ab2967fb9fce37c467de6b90c1cc26c82cf0c78fe948f1b4a6","ssdeep":"192:YnoKMWiDFQnWQyXp5njKdGL5WQpRDcNHTrDMeCNLWhL5WQpr6a3iGw0:Ynoc4FQWbpJj3L5T1cVlOLQL5TGa3iW","tlshash":"12e1fae2f9f67134966834b570cb2218671e59d6942cc868b4a69c5913ef088fff0f4d","size":6826,"data":"","first_seen":"2026-09-11T09:58:09.732536Z","last_seen":"2026-09-11T10:01:58.908548Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/page-c13ea0a1d583665e.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf144dc2078b8ae727b5fe5664966987","sha1":"937924be829402326db365594183739b5cfa78b0","sha256":"0040d1829feeb6beff6a0a9d43fc062963a980cde82d2fe1593b9751ecd2f25a","sha512":"1a3cb90027fe9f22bc72ef08daff844b9e33908c8738df3f6f38d9174fccec9866a4eae61c56d7ecd30d8f9f698e18bdcb9bb1c1e3580a03b4af06b47d54f435","ssdeep":"768:JFFJUYW0FZ4GOXIV6Tnsi1qcz2EIp/YUH5gUWGaVoWC:l3q10qVW","tlshash":"1d53d7339581232cf023ced417c99a0fb269d527d41616ace6b77d258bc7ac742b278e","size":65690,"data":"","first_seen":"2026-09-11T09:58:09.706947Z","last_seen":"2026-09-11T10:01:58.906722Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/9403-76b25350b56b0f54.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"39987367508eac8a0abd81cb44825160","sha1":"dd1dc7a641c68eff0f00fa6b9a021e75807940fd","sha256":"eb211a29eb6a8f7ad2b63fd8516ae2a0c9f1e48f37f7bdd5266ab594e2673fc2","sha512":"241277439a6d68dba9f208a09420ba8a8ba173d8123880485ed64cd2aee83f12d27e4eeffce4a86019548dbf4a3496687a1b76106337c62140445e86d03378c1","ssdeep":"384:KixVFwmcRKIr1iunqZwxxr5UUs8jhHWqkz4M6QoBKEfbkiwxDlPxJDXPjgrvK+9s:5VWKunngCORqkzTuBKEfciDinlI+","tlshash":"43f2fac1e636b07297df321e96a24001a6b8d458a50e04bdb2e6c85f6b1ddcd53e2f39","size":36804,"data":"","first_seen":"2026-09-11T09:58:09.731236Z","last_seen":"2026-09-11T10:01:58.906137Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/auto/page-32cc3edbefee3146.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7044a7b5aa83051be7ccc690b15b1764","sha1":"2aca4e74200f6af284f27d216a07feb6fa0a3b74","sha256":"0379269a91ffbe89c50396b4d0fe48056c0a4ce4278177098627c9128f4c9f51","sha512":"5491e45b2904da9e9d728511d83100d0ca3739e703a6da351ab087a6e070cae26b3b69022b3badf10b0c700063f9308d1f0529380b315135215e12cb28841a1d","ssdeep":"192:U6oMRgPL5bwIXHP85d99nGqEtDUIkb99t6:wMRslbh0TG/DUlo","tlshash":"83227322d044fb7cf4369dd4bb0c89af721e5a63cc595678a5b93c218a427c776322ca","size":10673,"data":"","first_seen":"2026-09-11T09:58:09.696412Z","last_seen":"2026-09-11T10:01:58.899472Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/4239-5bbede7ea8dbec4b.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a4d7ae675a8d562ad237c9b2ca46c54","sha1":"b53a9130afac92a26e84dffbbce5afc8ba865329","sha256":"999d13ba52c4dc15be735bd5e955a3844063e38bf714e5489bb4b0da897a3c75","sha512":"dedb1578582162d854fd1aed228eafd53696df2b55d32a9dfea5f3bcc1bded173f005ec37334c9d44a663981e0e769e9bce37ed3d6e8701e78a0198651bdb9d5","ssdeep":"384:FmM+qQZnlzKE04IaTzvve+rdZH9cjZBMe:8XjIaHu+n9SZ1","tlshash":"4672a4e6319670555b9340f4903b410bf736287507098168b239d8fdbcb95caa1aefbb","size":17378,"data":"","first_seen":"2026-09-11T09:58:09.69522Z","last_seen":"2026-09-11T10:01:58.910461Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/webpack-bc95a280f64656e4.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"62af88f962a9726650e69e694831c8e9","sha1":"b0405b216b0ca99a8992475f928f5ab0ada69148","sha256":"a51c23c45c42380ee73422f6aeeae1db2a750e82296724e3ed5ea7b93ef93dac","sha512":"67cb7a562460f382f168ed92e125ad20e961040658d9f92ee0914302e2a5856fbb7d6e5f8ce4b5d3dfda57de090ced6a2e17ca8d3ef097e5e28353b74e16241e","ssdeep":"96:0myGpcsKAqkYG/ezBHTv2GGTln8uQRfBZvsp9E/9mVVwLVx8DfzgSGFGz9zN/nRg:FFpZDYFzBHT+8Lwi9mVEQDLgkZNcxbo4","tlshash":"6ec10aa62324b9752ab004c5dc3ed954fe14a032291ee8c0e65bdcb97478f8a4470e72","size":5883,"data":"","first_seen":"2026-09-11T09:58:09.705071Z","last_seen":"2026-09-11T10:01:58.900091Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/leaderboard/page-53987f48ba028406.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ddc69b2821a84603314ca18311c5ac9","sha1":"4cfa3152f812335aec9644b3f5ecf19db2443e6b","sha256":"c0893f0b25779e57de1ae887698d8877b3ea9fe4b40ee5c2ef1e909bbd2304ac","sha512":"668bdd5fdd8a089e2f4d57ed4381537b7fe9694c39985fda1bb88277891d4dc611d4baf0e2f55e26cca11c33ef454d66a16cd552f953b1d60f5930dd5f4e696b","ssdeep":"384:QDuNrDsA5P/aQcVblfdOSLlgxShz3V5HZ36z:QDEr5M5tlZHZ6z","tlshash":"8fc2877691512b19f0379dcc0b89a74ef068c406de155baca0b57c364f8bde127ea3ca","size":25958,"data":"","first_seen":"2026-09-11T09:58:09.710381Z","last_seen":"2026-09-11T10:01:58.901535Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/4bd1b696-77fcd6155feedb5e.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4d38db17a7dc34794d02ac6ff8e53d","sha1":"23813c33e1fbc549916dacd46c53f5a5a9334b8c","sha256":"da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f","sha512":"ced05478bba884f7920efc9ed9bbb7a639401e7d937620c971972b34fd73140284332891589d549dda27e63373149f61c887aa11013ad40335e5c55ad5082173","ssdeep":"3072:dtfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:dtfj2ld4Y40fUHQRE4","tlshash":"c4f3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","size":168419,"data":"","first_seen":"2025-04-18T12:16:34.472727Z","last_seen":"2026-09-11T10:25:31.668685Z","times_seen":4841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/7446-34707013058f7ca0.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eca9443f9c82eec8bc7bee59ad1433cf","sha1":"43f332e93d49f01522230dc2e92ecd9e14677d57","sha256":"d11351364f2d3779f60a3fcb8e29e128249cf4f2e8172ffd7cb7a96609347a62","sha512":"5a48a54e04b641cc68210f3c59cee680201ac4fc395889155c5a4eb6198c3959aca45251ffbf6d21016fa72fabfb6d435010993f9ea5df3229930900838c38b0","ssdeep":"768:/IfHuKJpSFD3SH2BsIPrt/AJOqfWrqy8PH:Suwz2BsUraE8PH","tlshash":"41331792731178ba9bdbc189a41b0080e1345ca0150d44bc7bf9adf6b9d76cda2eef74","size":52440,"data":"","first_seen":"2026-09-11T09:58:09.728985Z","last_seen":"2026-09-11T10:01:58.917552Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Origin https://www.robinhood-me.app not found on Allowlist - update configuration on cloud.reown.com","filename":"https://www.robinhood-me.app/_next/static/chunks/1684-f96bb3cb3540cc9b.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","line_number":1,"column_number":110400}]},"http":[{"url":{"schema":"https","addr":"www.robinhood-me.app/tasks?_rsc=3lb4g","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.513Z","timestamp":1789120879513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /tasks?_rsc=3lb4g HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.robinhood-me.app/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 130244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"c7b33cf16b4ca0ddad63a5bf99e0b686\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nx-matched-path: /tasks.rsc\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pq4hl-1789120879516-be0904682335\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8104,"size_decoded":3001,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3414)","md5":"1c5a646aa7e0b78d774122821d36d615","sha1":"f1d4d2e379a479cb0f8b56628f41940f7d593d58","sha256":"81dad269afbd56c8c3325214c6073343db92c3c0e5c3dbc8fb852bdd98e40276","sha512":"d61a31205d30dfa6a322418f8fa864019329bee8e74e0e1a4ec7423571fe29a2bf220005270a74a675cf49b9049ca1949e3d9808f29cdee8621959bd62ec6a06","ssdeep":"192:Yog7QJS155IAz/HNm8JcRLzLl8NFYxXg+DzYVE:E5ILnuAYVE","tlshash":"c1f1762b9644ac37ffeec0b6406f635a329e8237571198b7c7ad5e1e071806f2e46352","first_seen":"2026-09-11T09:58:09.692407Z","last_seen":"2026-09-11T10:01:58.894966Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/richaberman.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.607Z","timestamp":1789120879607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/richaberman.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"richaberman.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"fd208a4e6f6818206e302fd7071adde5\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/richaberman.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5pqxh-1789120879611-e4a30c2fae83\r\ncontent-length: 12328\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12328,"size_decoded":12889,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd208a4e6f6818206e302fd7071adde5","sha1":"4e5d1fce46331a95e7e12f1e1515fa8b0b0313e3","sha256":"19fd9b91b83fc905f732e0be476f60f9d84c8f20f5719aa20532812126bc565d","sha512":"8de6df4d94058d07e680bde6fe87a7061fcb72bbed0802d7eb027033dd28ee09ff87ba0a7544962d11e36e3de3efc02f0def09cec52244f94923c276889af2a6","ssdeep":"192:ywRWLihRuu4A8EGuCRBZqGKCMIhS+xLHZm9ZTdw+kgfasnMMajSbJFwqHKZbhq7z:ykWe70GCLMmptHZm1whgyjjSLq/LM","tlshash":"a142af5d54892b94b06e543b6b951c032e23d781d1aaa51cfcdbf33a29f16fa2030ce9","first_seen":"2026-09-11T09:58:09.703735Z","last_seen":"2026-09-11T10:01:58.896206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/airdrop/page-632a34215c68f282.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.581Z","timestamp":1789120879581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/app/airdrop/page-632a34215c68f282.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 6397\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-632a34215c68f282.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"f1757d57215f3fb218004d6f46b3adb0\"\r\nlast-modified: Fri, 11 Sep 2026 08:14:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/airdrop/page-632a34215c68f282.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5pqxh-1789120879585-ea013d544fcd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":12209,"size_decoded":4029,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12201), with no line terminators","md5":"f1757d57215f3fb218004d6f46b3adb0","sha1":"702da19f342bfc5b9258c13f73d586b2d738fb99","sha256":"63499b0df43a61ffc899f41562ce28cec7d4b3d78c9e5784adf9d64c9d9f56ad","sha512":"8a4f5775a495d266d5e337d04ff5a01b31102d6907972b337d66e283ab561d5f973afa4c4c1e4f208e24da2ce0dfdc235377dce38db9e8bf5311d1d88fde6626","ssdeep":"192:A07YPfepXn6N6hRFFle/TK11Oqt37qOjTjF/GtoEaIbwNEIwarlQoqVgAzqvlxYJ:AMSEn6N6Pvlo+tGydSaWwNZjRQaoolxM","tlshash":"ec427653d8a8675cf0328edc658e47cd7399821ed50a52ade8e17d180b8b5c25ab33cf","first_seen":"2026-09-11T09:58:09.72616Z","last_seen":"2026-09-11T10:01:58.897278Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/tbsversion.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.602Z","timestamp":1789120879602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/tbsversion.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"tbsversion.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"81d8c9f88d8a7deb32111fee734f5f76\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/tbsversion.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8j5ct-1789120879605-4fb26430e8a8\r\ncontent-length: 7632\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7632,"size_decoded":8190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"81d8c9f88d8a7deb32111fee734f5f76","sha1":"3551d030afcc3682b3ae269d540933b2060b8d0b","sha256":"6c10b611bcb857c70140e34c3ef71139667f2e06ddca1501b6b67b0c3d666ad8","sha512":"0ff3fc4ec37dcac702b06a189773b2cc2feb38de97437f07b127ab02f4b736b838f6f5be23911a9380e9d17de2697a9fedef950791dea3ec2b445ab40a1eae6e","ssdeep":"192:ZQkLtnwjNCM7+86vWtwwbwWZPdaadzb1hPRq:ZQIxK+opHZEadzbLPI","tlshash":"3ff1afcd81b74bba40957f64ae0cf82e77228d7429a4567de526c40f05d48882b8f5fd","first_seen":"2026-09-11T09:58:09.73478Z","last_seen":"2026-09-11T10:01:58.898069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T10:01:18.657Z","timestamp":1789120878657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 131603\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"91954049909e81eaaa8f53598e41c380\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7fgzl-1789120878699-6f4f66510e87\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20141,"size_decoded":5242,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20121), with no line terminators","md5":"bbde817d3843421aa435f5ae365dadf3","sha1":"dc4148cff2c3cb46b09c2f6361871c5c562c97ef","sha256":"d8fc4958d5af06c85f9aeb8e078c06bc70d59856ecf8b16b01c2878e7e0b6950","sha512":"e4c983b298f082e91e5e12078a12bfa38e7871089c46f4b7e8011bdb729fa0107211c0d6bc97ccf98828bc93273bdb008585894fbabdf8559f41dc49024f44c9","ssdeep":"384:PJO8Qk5yWSz+1aWob5eJRj/6cmeXQ/4rnUsGE:PJOdk5yWSz+1hg5Uh6cmeA/4rnUsGE","tlshash":"579297639441fd0795bbecea517a7f3f30da8a1fc945e129a3fdca8b06458f22911e01","first_seen":"2026-09-11T09:58:09.716052Z","last_seen":"2026-09-11T10:01:58.898778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/auto/page-32cc3edbefee3146.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.582Z","timestamp":1789120879582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/app/auto/page-32cc3edbefee3146.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 6398\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-32cc3edbefee3146.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"7044a7b5aa83051be7ccc690b15b1764\"\r\nlast-modified: Fri, 11 Sep 2026 08:14:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/auto/page-32cc3edbefee3146.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8j5ct-1789120879585-3e99334c7d0f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10673,"size_decoded":3621,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10651), with no line terminators","md5":"7044a7b5aa83051be7ccc690b15b1764","sha1":"2aca4e74200f6af284f27d216a07feb6fa0a3b74","sha256":"0379269a91ffbe89c50396b4d0fe48056c0a4ce4278177098627c9128f4c9f51","sha512":"5491e45b2904da9e9d728511d83100d0ca3739e703a6da351ab087a6e070cae26b3b69022b3badf10b0c700063f9308d1f0529380b315135215e12cb28841a1d","ssdeep":"192:U6oMRgPL5bwIXHP85d99nGqEtDUIkb99t6:wMRslbh0TG/DUlo","tlshash":"83227322d044fb7cf4369dd4bb0c89af721e5a63cc595678a5b93c218a427c776322ca","first_seen":"2026-09-11T09:58:09.696412Z","last_seen":"2026-09-11T10:01:58.899472Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/webpack-bc95a280f64656e4.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.943Z","timestamp":1789120878943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/webpack-bc95a280f64656e4.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86819\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-bc95a280f64656e4.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"62af88f962a9726650e69e694831c8e9\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/webpack-bc95a280f64656e4.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8zctv-1789120878947-0a7e766057b0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5883,"size_decoded":4013,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5444)","md5":"62af88f962a9726650e69e694831c8e9","sha1":"b0405b216b0ca99a8992475f928f5ab0ada69148","sha256":"a51c23c45c42380ee73422f6aeeae1db2a750e82296724e3ed5ea7b93ef93dac","sha512":"67cb7a562460f382f168ed92e125ad20e961040658d9f92ee0914302e2a5856fbb7d6e5f8ce4b5d3dfda57de090ced6a2e17ca8d3ef097e5e28353b74e16241e","ssdeep":"96:0myGpcsKAqkYG/ezBHTv2GGTln8uQRfBZvsp9E/9mVVwLVx8DfzgSGFGz9zN/nRg:FFpZDYFzBHT+8Lwi9mVEQDLgkZNcxbo4","tlshash":"6ec10aa62324b9752ab004c5dc3ed954fe14a032291ee8c0e65bdcb97478f8a4470e72","first_seen":"2026-09-11T09:58:09.705071Z","last_seen":"2026-09-11T10:01:58.900091Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/grantbradford.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.603Z","timestamp":1789120879603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/grantbradford.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"grantbradford.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"e8a8faf493c004d4bfca16350aed868a\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/grantbradford.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7fgzl-1789120879606-3e15cfb1e56c\r\ncontent-length: 15292\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15292,"size_decoded":15857,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e8a8faf493c004d4bfca16350aed868a","sha1":"16218cc6160e037cffc9fbfc0ba6c223239a80b1","sha256":"2cdc4db2bb4dddbadf1d6503b437631d75fe35d95ea2afe03f5f9e8f6c2ff5c9","sha512":"f6d8d20157d885bb53b594fc54472b4355d3bb1f7979dcdcc742ea15c159e3d989edf2a9fdba2cec74813a63af50a97eef67ba2fd409b2cdc4b60744d64c9f89","ssdeep":"384:9+zP6yvXMVQD0sW/cgedocXaRTJRFzypoILCCc9gr:9+NvMWVWEgyooaldzyWiCCc0","tlshash":"9d62d0b0112395fecf875928575068430c3a783fa6669a3f285b105ecea013efad474e","first_seen":"2026-09-11T09:58:09.702582Z","last_seen":"2026-09-11T10:01:58.900825Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/leaderboard/page-53987f48ba028406.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.579Z","timestamp":1789120879579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/app/leaderboard/page-53987f48ba028406.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 6398\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-53987f48ba028406.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"9ddc69b2821a84603314ca18311c5ac9\"\r\nlast-modified: Fri, 11 Sep 2026 08:14:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/leaderboard/page-53987f48ba028406.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hxzmk-1789120879582-933d201822ba\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25958,"size_decoded":6847,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25954), with no line terminators","md5":"9ddc69b2821a84603314ca18311c5ac9","sha1":"4cfa3152f812335aec9644b3f5ecf19db2443e6b","sha256":"c0893f0b25779e57de1ae887698d8877b3ea9fe4b40ee5c2ef1e909bbd2304ac","sha512":"668bdd5fdd8a089e2f4d57ed4381537b7fe9694c39985fda1bb88277891d4dc611d4baf0e2f55e26cca11c33ef454d66a16cd552f953b1d60f5930dd5f4e696b","ssdeep":"384:QDuNrDsA5P/aQcVblfdOSLlgxShz3V5HZ36z:QDEr5M5tlZHZ6z","tlshash":"8fc2877691512b19f0379dcc0b89a74ef068c406de155baca0b57c364f8bde127ea3ca","first_seen":"2026-09-11T09:58:09.710381Z","last_seen":"2026-09-11T10:01:58.901535Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/vladtenev.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.610Z","timestamp":1789120879610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/vladtenev.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"vladtenev.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"17f0ae0b294ad662cd023f84fc5db027\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/vladtenev.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5pqxh-1789120879613-f7eb91055d5f\r\ncontent-length: 5252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5252,"size_decoded":5808,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"17f0ae0b294ad662cd023f84fc5db027","sha1":"1f67723ad406eb1e37b11bd11403498cd481c41c","sha256":"6302c05f0d4955ff79b987b986c0766c10c3d5fdb20e2dcf0fd50a7d43dfa7bd","sha512":"dce2c1ac7e5c307239dcd9d30218035d9630fd4fa23e2369020757abbd8216272f33d4ed2352fc2ab2320c5cf33bed0e4f260beb311ad7e9fa40a5986e6d4cf5","ssdeep":"96:Gvn+XtnMbpa/e+DBfpDNBvMh19AXTrMn8BsgFQwoU51GoWK26L40FpLkXl4:GvinMbEBR7vMByrxMwoU5oY2e40Ftue","tlshash":"cdb17dac422f7f72679f1f1d209c627e8a7b44a67cd28e894539957f25803b0331c826","first_seen":"2026-09-11T09:58:09.723954Z","last_seen":"2026-09-11T10:01:58.902136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/airdrop?_rsc=3lb4g","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.514Z","timestamp":1789120879514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /airdrop?_rsc=3lb4g HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.robinhood-me.app/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 130244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"3edda02aee557c68809628511e86e41b\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nx-matched-path: /airdrop.rsc\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pq4hl-1789120879517-35002a644684\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8112,"size_decoded":3004,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3420)","md5":"45e7f6923326577d04a9831b96536e3e","sha1":"2e81173d5c6010d2b9e17ce74d7412e9e2263635","sha256":"9a808d6fde964ce7d07eccf24f06b56b70a65cdfb029ba4f14b019c0e2c03872","sha512":"acf93b1f858ed0729a495e67b76e805bb7efc4dd73e23ac44485a25776edef4b45add6564361c7ed79c0e9c52551fb07e91743b540692540f1c04ca44ff914b9","ssdeep":"192:Yog7QJR155IAz/HNNSRLzLl8NFYxXg+DzYVE:H5SLnuAYVE","tlshash":"5cf1862b9644ac37ffeec0b6406f635a329e8237571158b7c7ad5d1e071806f2e46352","first_seen":"2026-09-11T09:58:09.733727Z","last_seen":"2026-09-11T10:01:58.902948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/jbmackenzie_.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.609Z","timestamp":1789120879609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/jbmackenzie_.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"jbmackenzie_.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"45359af9ccdba0fa561de8103b91b0b5\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/jbmackenzie_.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6fkt-1789120879613-4f888be4d533\r\ncontent-length: 11752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11752,"size_decoded":12315,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"45359af9ccdba0fa561de8103b91b0b5","sha1":"7e1684e7af8a9512486bb084174554d595652e4c","sha256":"c45ab9aa9300e7fe83966c9b79dd051654de9d84f389728085806028aed87e24","sha512":"714a287447bfedc4b44ba27755e2b17eeeda61e582d922990f339dd048edd81f5f19944a60063e47b27f9c909b6cf953d71208454a8f0c4847a7a00cc7a57a68","ssdeep":"192:RRG8WE9J3xHXmvsRJ6YzX+73xbeBuhNx6VqwlxcgousuvMQIA9zw+UY16VPXPYr3:m8WE9VxHXesf6YzO73Vcuh2Vligouhvp","tlshash":"a332c0ddb38a5795f08b5d09ab8506c0c4f22ee6066f472662b8cad12dc1fcd035dd60","first_seen":"2026-09-11T09:58:09.73585Z","last_seen":"2026-09-11T10:01:58.903612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/leaderboard?_rsc=3lb4g","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.514Z","timestamp":1789120879514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /leaderboard?_rsc=3lb4g HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.robinhood-me.app/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 130244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"b2f52d138282b1cbf71d06f9c1aea03f\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nx-matched-path: /leaderboard.rsc\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5f6wt-1789120879517-bf8b8dc1bd97\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7958,"size_decoded":3015,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3432)","md5":"9a92977e493290f40dd5405bd9df014f","sha1":"664bfe43c781b572d9824778ec1d28155d773de0","sha256":"1dd0efb4160e70291478258cd1d2542ec5a50093c3c4913c80d22a8b9665c9f1","sha512":"39f5c67eabd6f98ea18bd6af9a842c193c643187be12cb7f8c34d83b7a9f99b01031fec889c9cd0542e7e4a2c48253e17d11cbf73b1c0d6a4a666e0ffd9d6f04","ssdeep":"192:Yog7QJR155IAz/HNvFRLzLl8NFYxXg+DzYVE:n5rLnuAYVE","tlshash":"0ff1962b9604ac37fbefc0b6406f635a329e8237571158b7c7ad5e1e075806f2e46352","first_seen":"2026-09-11T09:58:09.725058Z","last_seen":"2026-09-11T10:01:58.904298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/stephguildnyc.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.600Z","timestamp":1789120879600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/stephguildnyc.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"stephguildnyc.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"f711fad7940c52a08535bf4c5322cd1d\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/stephguildnyc.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7fgzl-1789120879603-bb0c027f7dca\r\ncontent-length: 7502\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7502,"size_decoded":8066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f711fad7940c52a08535bf4c5322cd1d","sha1":"44118682e7829877e79edfe4dbbe5c368ac73f2b","sha256":"46787bc838d169f8b3380ce962a729223ff487e88fc72ac9a6d35d7720a754a8","sha512":"3647fa376e0d88b33cff4d6d618d35816a831f29f86dbd4f7197534ebcc09495ee719681b0959d464677261e99b2280024295d4e84829fe7e0c4e2956d509ab5","ssdeep":"192:b45rKz8g/oTZs2ycfweVZ/DKKWquDYSM9y+:sdKoOol8cweVZ/+KUNC","tlshash":"1ef1af2939b626146d0683e6cac5d6234df48ee9c17af0f249d86e6d6c05f93b276c20","first_seen":"2026-09-11T09:58:09.719569Z","last_seen":"2026-09-11T10:01:58.904903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/1684-f96bb3cb3540cc9b.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.946Z","timestamp":1789120878946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/1684-f96bb3cb3540cc9b.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 6402\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1684-f96bb3cb3540cc9b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"b1f3484cbd12b63f9a37424577ebfff1\"\r\nlast-modified: Fri, 11 Sep 2026 08:14:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/1684-f96bb3cb3540cc9b.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8zctv-1789120878949-10d2f588c319\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":176603,"size_decoded":47538,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b1f3484cbd12b63f9a37424577ebfff1","sha1":"3429a80766b4721f33cc3eb47f457743092aff83","sha256":"1cb2be82c9c01ede043888dea375fe38c90aaeed2ea056b5ca6062c6fb517819","sha512":"52487cd8f950490a035163f54b43af21700a331019c2814977d67892454d23e110753c7fb32776fef2cbecfd9d91da4985c89bffa342b7222c88bb2ce0a8c56e","ssdeep":"1536:Q9A+1AVc+dJWgclHHlU0Nb8OeMCaZLoEAETRaQ3wTcXH10CZ6XCdyZXEoFUNnly2:AAW+dJW9lAMgETV3UyZCUNM/e","tlshash":"9004b8b676d0f89107a780d5843b400af3395c3b146f74a0a3e6cce975645dea1b3faa","first_seen":"2026-09-11T09:58:09.720727Z","last_seen":"2026-09-11T10:01:58.905488Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/9403-76b25350b56b0f54.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.959Z","timestamp":1789120878959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/9403-76b25350b56b0f54.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9403-76b25350b56b0f54.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"39987367508eac8a0abd81cb44825160\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/9403-76b25350b56b0f54.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pq4hl-1789120878962-c8d47748705e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36804,"size_decoded":13847,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36804), with no line terminators","md5":"39987367508eac8a0abd81cb44825160","sha1":"dd1dc7a641c68eff0f00fa6b9a021e75807940fd","sha256":"eb211a29eb6a8f7ad2b63fd8516ae2a0c9f1e48f37f7bdd5266ab594e2673fc2","sha512":"241277439a6d68dba9f208a09420ba8a8ba173d8123880485ed64cd2aee83f12d27e4eeffce4a86019548dbf4a3496687a1b76106337c62140445e86d03378c1","ssdeep":"384:KixVFwmcRKIr1iunqZwxxr5UUs8jhHWqkz4M6QoBKEfbkiwxDlPxJDXPjgrvK+9s:5VWKunngCORqkzTuBKEfciDinlI+","tlshash":"43f2fac1e636b07297df321e96a24001a6b8d458a50e04bdb2e6c85f6b1ddcd53e2f39","first_seen":"2026-09-11T09:58:09.731236Z","last_seen":"2026-09-11T10:01:58.906137Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/page-c13ea0a1d583665e.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.962Z","timestamp":1789120878962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/app/page-c13ea0a1d583665e.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-c13ea0a1d583665e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"cf144dc2078b8ae727b5fe5664966987\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/page-c13ea0a1d583665e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kxk5v-1789120878965-80e3053f8f66\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":65690,"size_decoded":16592,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65514), with no line terminators","md5":"cf144dc2078b8ae727b5fe5664966987","sha1":"937924be829402326db365594183739b5cfa78b0","sha256":"0040d1829feeb6beff6a0a9d43fc062963a980cde82d2fe1593b9751ecd2f25a","sha512":"1a3cb90027fe9f22bc72ef08daff844b9e33908c8738df3f6f38d9174fccec9866a4eae61c56d7ecd30d8f9f698e18bdcb9bb1c1e3580a03b4af06b47d54f435","ssdeep":"768:JFFJUYW0FZ4GOXIV6Tnsi1qcz2EIp/YUH5gUWGaVoWC:l3q10qVW","tlshash":"1d53d7339581232cf023ced417c99a0fb269d527d41616ace6b77d258bc7ac742b278e","first_seen":"2026-09-11T09:58:09.706947Z","last_seen":"2026-09-11T10:01:58.906722Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/brand-logo.png?v=5","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.965Z","timestamp":1789120878965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /brand-logo.png?v=5 HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85641\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"brand-logo.png\"\r\ncontent-type: image/png\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: \"adde23b571da6c09ce508d4e558145cb\"\r\nlast-modified: Thu, 10 Sep 2026 10:13:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /brand-logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t6zps-1789120878968-011d837ba63a\r\ncontent-length: 219775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219775,"size_decoded":220326,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"adde23b571da6c09ce508d4e558145cb","sha1":"98d4e1a31527070f478671d812fda0e03791573a","sha256":"69d7d1528b8d6f9227b3318ecc828559c605efa6c7428c22a6f83b93ec21d4ae","sha512":"18bda4cf89145ba73eba3ebb0eea40bf5840e49622eea1f3defeb0a73180acc8c22c678d54174b7cb412fa3bb6f8283508ad4924cc0eec9f1de2c12b33b6ab36","ssdeep":"6144:W50ehA/PSeKFDmFP+v3jKt+3xYJWJbE+0qKeoq3r:WueeXj+v3j0+3xoi0qKeokr","tlshash":"8d242373e12c61f226dd29eeb4afd8fea1594850d2546c2f3a2789d3fdb0d560e19028","first_seen":"2026-09-11T09:58:09.689535Z","last_seen":"2026-09-11T10:01:58.907336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/7285-02240f78a6d16017.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.957Z","timestamp":1789120878957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/7285-02240f78a6d16017.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7285-02240f78a6d16017.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"47ff47ce9acd0ce7ad27077e5427c761\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/7285-02240f78a6d16017.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kxk5v-1789120878961-caaa076b72bd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7695,"size_decoded":3950,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7633), with no line terminators","md5":"47ff47ce9acd0ce7ad27077e5427c761","sha1":"a5c32d07b4c8aa79277aae799ef6834c74e9bfbf","sha256":"52f2d76a7c2cef902bd3d50f3c23cf45b0000a5e2c62ce0a186af06685aeecf2","sha512":"8a1dcf60c64c317aa4633270dddcb40ef69fdb484752d722b72648b21de078ab31b5853f4979a31034c1350feb06ecac9dadc16b9d4ccd75979c71d879fda5d9","ssdeep":"96:EK8yGLcyrObL4XI6cGt9mgQOlMqHAMdrQuXNgyZ1y26Tyk/hmnSriMfk5wgagrWI:a1L9rOmIi99rMSVy26Tyk/hmnSk54Oj","tlshash":"19f12ab9c382335077a601e615092159f37e0561e5280a7836a3bc2077669ccf7f1bdf","first_seen":"2026-09-11T09:58:09.743324Z","last_seen":"2026-09-11T10:01:58.907935Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/7997-90952b05ffd0b005.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.961Z","timestamp":1789120878961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/7997-90952b05ffd0b005.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 116999\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7997-90952b05ffd0b005.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"0964050aca125d2bfb75fe21e63d81c2\"\r\nlast-modified: Thu, 10 Sep 2026 01:31:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/7997-90952b05ffd0b005.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t6zps-1789120878964-41881e09b6bc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6826,"size_decoded":3568,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6730), with no line terminators","md5":"0964050aca125d2bfb75fe21e63d81c2","sha1":"7a22a816f3e1ec834fa24ad1d168ea0aa838fb2e","sha256":"d0ecdcf27af384cb19584b2ca2ecd96feb0b89b3d32c4eb9b1e2ea892ca89b1a","sha512":"c3436419aa4eaf1f9a54d0b4eab324add76547d437b30eff323f58ab25e520fb0bff293b0bc2a9ab2967fb9fce37c467de6b90c1cc26c82cf0c78fe948f1b4a6","ssdeep":"192:YnoKMWiDFQnWQyXp5njKdGL5WQpRDcNHTrDMeCNLWhL5WQpr6a3iGw0:Ynoc4FQWbpJj3L5T1cVlOLQL5TGa3iW","tlshash":"12e1fae2f9f67134966834b570cb2218671e59d6942cc868b4a69c5913ef088fff0f4d","first_seen":"2026-09-11T09:58:09.732536Z","last_seen":"2026-09-11T10:01:58.908548Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/l/font?kit=kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsL7E7I5fGngqMogWKQ4h9UPXPrH2QOGy2QXunGMNgQ6JTk3vhb51wwP_6Z9v72EKHJ114XCY15ajjg-\u0026skey=b8dc2088854b122f\u0026v=v371","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.622Z","timestamp":1789120879622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /l/font?kit=kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsL7E7I5fGngqMogWKQ4h9UPXPrH2QOGy2QXunGMNgQ6JTk3vhb51wwP_6Z9v72EKHJ114XCY15ajjg-\u0026skey=b8dc2088854b122f\u0026v=v371 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.robinhood-me.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-length: 23828\r\ncontent-disposition: attachment; filename=\"font.woff2\"; filename*=UTF-8''font.woff2\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ndate: Fri, 11 Sep 2026 09:57:29 GMT\r\nexpires: Sat, 12 Sep 2026 09:57:29 GMT\r\ncache-control: public, max-age=86400\r\nlast-modified: Tue, 08 Sep 2026 21:58:45 GMT\r\ncontent-type: font/woff2\r\nage: 230\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23828,"size_decoded":24455,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23828, version 1.0","md5":"05684763c54aad9cb93dbc17e62e971f","sha1":"cbca94baaa61589a367680f7796552db565c6dea","sha256":"8163132aa79669fe875348cf3e23a223ba18f924caa2ec57c9c71651fc218ba0","sha512":"f3c89018c7f574b376b66eb2401f349e11a2aeab98b89bb757cf456a1ba3cc0c621531a24fc90556bc7cfad2a9ed46f6a7295c97ace8f205eaaa366f2e2647fe","ssdeep":"384:Ex1b1CDMhz7Umd+5EfQ9FaE13uB7EQ215jslUQd35DucN3C3i5ob:G1b1CYhz79dMaEdux21xsuQ55T5ob","tlshash":"8db2e1ca4b8f76c9ed8e563671958420232f03a7c55b7dee05deaf430029ac24969cec","first_seen":"2026-09-11T09:58:09.708936Z","last_seen":"2026-09-11T10:01:58.909348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/4239-5bbede7ea8dbec4b.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.948Z","timestamp":1789120878948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/4239-5bbede7ea8dbec4b.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 6402\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4239-5bbede7ea8dbec4b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"1a4d7ae675a8d562ad237c9b2ca46c54\"\r\nlast-modified: Fri, 11 Sep 2026 08:14:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/4239-5bbede7ea8dbec4b.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pq4hl-1789120878951-e556877a0b55\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17378,"size_decoded":6641,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17378), with no line terminators","md5":"1a4d7ae675a8d562ad237c9b2ca46c54","sha1":"b53a9130afac92a26e84dffbbce5afc8ba865329","sha256":"999d13ba52c4dc15be735bd5e955a3844063e38bf714e5489bb4b0da897a3c75","sha512":"dedb1578582162d854fd1aed228eafd53696df2b55d32a9dfea5f3bcc1bded173f005ec37334c9d44a663981e0e769e9bce37ed3d6e8701e78a0198651bdb9d5","ssdeep":"384:FmM+qQZnlzKE04IaTzvve+rdZH9cjZBMe:8XjIaHu+n9SZ1","tlshash":"4672a4e6319670555b9340f4903b410bf736287507098168b239d8fdbcb95caa1aefbb","first_seen":"2026-09-11T09:58:09.69522Z","last_seen":"2026-09-11T10:01:58.910461Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/7006.44423e216b256764.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.516Z","timestamp":1789120879516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/7006.44423e216b256764.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7006.44423e216b256764.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"14b09b0c0bcf7eb3ca4e43267c788c3e\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/7006.44423e216b256764.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5pqxh-1789120879519-c67441eeee7a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":505797,"size_decoded":140366,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"14b09b0c0bcf7eb3ca4e43267c788c3e","sha1":"8116ec1a975194de0dee4de82363b5b5197edaf4","sha256":"4d347b1b905683ed8693d2f1e7d2650cc12e121532e1327a507b810c4b2eab9e","sha512":"c8a4eecea9e31b195c9d31e4a4404c627e380b8dd15d75521980c59ba92127a5c952db67a1880820edbc34ac8890e6f3bf8f0672f627f4dcf82628447074acb5","ssdeep":"6144:btcTq9FLELpZcgU12qS5C6p3ycaN+GMH00M0zkz9sLrLoRRqH9GPQv8rKARbyMPs:+YuyV4oKmiTlckDLSnfHZ0ZyIzjB","tlshash":"60b45c517376f436039b819ea8a92201f2345899141a803dfbfcacebdf8498555bff72","first_seen":"2026-09-11T09:58:09.744283Z","last_seen":"2026-09-11T10:01:58.911197Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/spintopeyronel.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.604Z","timestamp":1789120879604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/spintopeyronel.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 229\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"spintopeyronel.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"211daf1f9ec0299b7b0801ac98be1f50\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/spintopeyronel.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5pqxh-1789120879607-2db5e6922d6c\r\ncontent-length: 12672\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12672,"size_decoded":13239,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"211daf1f9ec0299b7b0801ac98be1f50","sha1":"5c0111867d23a471d05c415beff288f1220dcb82","sha256":"dc770ada76eb9e9fbce4fb02842fcb7286a1f40126fe34174ecc7bff1ffde8f0","sha512":"c74807edd392f00a6bf162a86c7f93e52dc402e93da89cbd901eebb0eaa6106b0ce4cd70d9c75b06f8606224567325816b8b2e929f08076046e8e03d18247423","ssdeep":"384:bEL7HgZKRkTJgL0shID9PDrhj0i8CSjE66NU:A3Hg4klg/hIJnR0iHSjZ6m","tlshash":"bd42d136a65329c206c0257948790ae1b30c76cd8bd544d51ac47fcffbefecae869402","first_seen":"2026-09-11T09:58:09.727341Z","last_seen":"2026-09-11T10:01:58.911996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/2792-0461c7965f4ebfcf.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.952Z","timestamp":1789120878952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/2792-0461c7965f4ebfcf.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 132911\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2792-0461c7965f4ebfcf.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"de353116a85fd2a89538ba1b40f38213\"\r\nlast-modified: Wed, 09 Sep 2026 21:06:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/2792-0461c7965f4ebfcf.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t6zps-1789120878958-bf091b179e7b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45365,"size_decoded":16392,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45365), with no line terminators","md5":"de353116a85fd2a89538ba1b40f38213","sha1":"a71839930e6ecf40dbb2733d74aa21a35ef610e2","sha256":"93e12b8ef3d4c7ee153318edb0ec8743e87846c1ce0323568f1010b7c634c3b4","sha512":"52fb549585c74f597cfc0c74be67617a0b4e28426da7cee1e7ca1525942bc51027276514cfb66b3ab0c3132dfbf4d6eb9a6989622e45322504647e9893996aa2","ssdeep":"768:WXR63+n1EQsk6Gfsacp0vOLlqB0NlPRz+zXXDSc2SzwgThd:WB63+2Qsk1ap0+q+R6zXXDSc2KL","tlshash":"d41309f573d2b07657cb0049942b0005f23949ada40d403cbba45cfae4aa686e6f7f76","first_seen":"2026-09-11T09:58:09.700031Z","last_seen":"2026-09-11T10:01:58.912496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/abhishekf96.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.601Z","timestamp":1789120879601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/abhishekf96.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"abhishekf96.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"43d41c4354eeb6956e2983eb8823acb5\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/abhishekf96.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6fkt-1789120879605-ded2e106c20b\r\ncontent-length: 20460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20460,"size_decoded":21021,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43d41c4354eeb6956e2983eb8823acb5","sha1":"e387c244a77c1ee18a900fc411b296df0f26eb32","sha256":"e16cb8ad924c6ac3b0d4e41b83bba8e9958290e286ed6e5303f3bd77fce20b0e","sha512":"d14f2049ebea784661b2f65006d184880b1b038e8ffb5f5e1f20ec63f7e469cad09197b1983584475125348be9b13bb53098cb9a4cc8f217c6284cb5504a66da","ssdeep":"384:wwgarCzbw3+h325aPniXcA49R87kuyEeGhJ6FzxF1tTqB+xLfe7TG3A:VPrCzbwuhA49TGhezxF1tWMxav8A","tlshash":"c392d002573b3dcb6b4825d0a0c0264553ae434d9f22b24ff1daba6ea065d5d77332ca","first_seen":"2026-09-11T09:58:09.711939Z","last_seen":"2026-09-11T10:01:58.913139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200\u0026icon_names=bolt,cycle,task_alt,leaderboard,person,person_add,favorite,chat_bubble,bookmark,open_in_new,star_shine,local_fire_department,campaign,construction,payments,diamond","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.422Z","timestamp":1789120879422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200\u0026icon_names=bolt,cycle,task_alt,leaderboard,person,person_add,favorite,chat_bubble,bookmark,open_in_new,star_shine,local_fire_department,campaign,construction,payments,diamond HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 10:01:19 GMT\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":1135,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0f0bc34145f430fffe181482df5297c1","sha1":"c95368da5482986f192363eee8436a2e8b6b0457","sha256":"b4d76a041aad82bcece66b25e3399ebb28c0ea75cd3be75d70f376fca33ce9d1","sha512":"80536b507842b2499504315efe38afa600efdf9512a69f27d80d118f59ee62dd66a96ef3ae9adcdf01b462fe53a57b4b114c6d27be611d756f5714f505d79f9f","ssdeep":"","tlshash":"c9017b586b60984595550c67330f3f221d19840f780ad8fe5fa11e4d5dfe8730395b0f","first_seen":"2026-09-11T09:58:09.739694Z","last_seen":"2026-09-11T10:01:58.913764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":34,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinhood-me.app/","fqdn":"robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T10:01:18.582Z","timestamp":1789120878582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\nlocation: https://www.robinhood-me.app/\r\nrefresh: 0;url=https://www.robinhood-me.app/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::7fgzl-1789120878635-1b2bb83c3f0f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":18,"connect":1,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/shivverma.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.609Z","timestamp":1789120879609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/shivverma.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"shivverma.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"46e9f387d65c70f8fd426bd2554e5fa0\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/shivverma.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hxzmk-1789120879612-9dd259f3bd0e\r\ncontent-length: 8926\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8926,"size_decoded":9482,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"46e9f387d65c70f8fd426bd2554e5fa0","sha1":"76235ed753387aa85f5989dfb293003fdd1c4f34","sha256":"6d1f7b4ab559873e53eaaa8a5662681d1d0b1638bd58ce0fa2b8d3e02b398bc9","sha512":"d4db61461d61307e879dbd6ef5ae1f6200ffb7ba953379a91a875fac130cbb8bb07abc32dd03714e706e6cf4dd7696ae7b4e7794b53b11d9add17d3a1016194f","ssdeep":"192:5lLec9vngtlkpWgS7IeYjWHkKXbyLEAxQkM1W2ucgpLHord:5l4tlXgvRiHkS6EAT2uf1ord","tlshash":"9602bf351be24d76bcb9a26245bb38276743d63cde1b537f876366a0ac2120f2ed0412","first_seen":"2026-09-11T09:58:09.718375Z","last_seen":"2026-09-11T10:01:58.914864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/dangallagherdc.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:24.652Z","timestamp":1789120884652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/dangallagherdc.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"dangallagherdc.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:24 GMT\r\netag: \"ad93bb6c5fcc145fbeba0d4fee69390b\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/dangallagherdc.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::chldf-1789120884656-f36719194571\r\ncontent-length: 13124\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13124,"size_decoded":13691,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ad93bb6c5fcc145fbeba0d4fee69390b","sha1":"5579936e694c3143dc87dea6b9fb785d5a9bcb4a","sha256":"91ad9ca9ab6dca3e4c365c3e749eef88ba3d19adbac087c5ec5caf2a70a1e2de","sha512":"74b3f9a95b614f77c44cb258297913ab6865f81c0971501e6033bea4495985fe95aa4f9d7169c03ae4749a7df919943123953697a04e11b3bc24f5c16c80133d","ssdeep":"192:p/Xj4SRlN/lJZyM/Bi8lFk60wo7cZ06YPi/pMkVlmcUZz4xrOoXm8xd3ahqEu3ZK:p/8SBi8lFk60xiekUGx5OqEkZH1WV","tlshash":"3f42c0c66fea3cc50ae15c4503e6ccc7161ca92c6c97867ae4d5858d2caf4681f867d2","first_seen":"2026-09-11T09:58:09.693628Z","last_seen":"2026-09-11T10:01:58.915487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/e?projectId=6d6eaaf8a691406c303e729636736dfe\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.650Z","timestamp":1789120879650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 22:29:58 GMT","end":"Wed, 04 Nov 2026 23:29:15 GMT"},"fingerprint":{"sha1":"DC:2C:A2:F6:6F:BD:FF:1F:63:4D:26:F9:76:6F:09:F8:A4:BB:94:A9","sha256":"3A:2B:3B:46:D8:5D:7E:5E:B8:AC:B3:5F:20:89:81:38:30:56:39:FC:3D:A7:AC:22:F0:0E:3D:9F:E4:9E:CD:06"}}},"request":{"raw":"POST /e?projectId=6d6eaaf8a691406c303e729636736dfe\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.robinhood-me.app/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 737\r\nOrigin: https://www.robinhood-me.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":737,"data":"{\"eventId\":\"9250c99c-9170-450e-a4d0-b704fe446441\",\"url\":\"https://www.robinhood-me.app/\",\"domain\":\"www.robinhood-me.app\",\"timestamp\":1789120879642,\"props\":{\"type\":\"track\",\"event\":\"INITIALIZE\",\"properties\":{\"projectId\":\"6d6eaaf8a691406c303e729636736dfe\",\"networks\":[\"4663\"],\"metadata\":{\"name\":\"Hood Me\",\"description\":\"Find your onchain match\",\"url\":\"https://www.robinhood-me.app\",\"icons\":[\"https://www.robinhood-me.app/brand-logo.png?v=5\"]},\"showWallets\":true,\"featuredWalletIds\":[],\"excludeWalletIds\":[],\"enableEIP6963\":false,\"enableInjected\":false,\"enableCoinbase\":true,\"enableWalletConnect\":true,\"features\":{\"email\":false,\"socials\":false},\"manualWCControl\":true,\"basic\":true,\"sdkVersion\":\"html-core-1.7.8\",\"siweConfig\":{\"options\":{}}}}}"}},"response":{"raw":"HTTP/2 403 \r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a395d499ed41c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":307,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0feda806ae7bfc4aff278d8cfe3e6a19","sha1":"5c17dc62e9ecf7373ab598e7f5975824690c0da5","sha256":"eb373088f93777de9ac203dc0b83d0456192185b6721c3346ef2e405490aabc5","sha512":"408d84eebac49b6e07afe690216df04cbb0ef151f02e69ed989ca9b0491dfbd1954dda656504ecb99851be358824b400d348f23a2cb371356a50fdf3af6ca0ee","ssdeep":"","tlshash":"a0a022ce83023220038303082b0c3f0082830280f00a83c2ae20802b0c0232800808ac","first_seen":"2026-09-11T09:58:09.722939Z","last_seen":"2026-09-11T10:01:58.916352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":290,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/stevequirk_.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:28.688Z","timestamp":1789120888688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/stevequirk_.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"stevequirk_.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:28 GMT\r\netag: \"0c30583edd28bed8227690e288752abc\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/stevequirk_.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rt6ft-1789120888692-a5d1ede7ed1c\r\ncontent-length: 14618\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14618,"size_decoded":15179,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c30583edd28bed8227690e288752abc","sha1":"3f8e28b4193b197b861a62c2bc815750fd1b715a","sha256":"a0a3afab31d5a8c2a2497994fb60f9f47e3a8e0ec9b7f249fcae7c4852d89bb1","sha512":"a6a1c3aea183ff619449ac7cbdceb770e3417112dd61dcfb8f794b5b427bafeff8ca95b37a2d17ab395699f16d791f1d8e13b6f127017ebd8fbb9ffa2461e312","ssdeep":"384:j8comH3dlDmTFv3kEzTWkdbTxY+Ew2Tmr7qeVD:0mXGJv3nSkdb1Sw+mrN","tlshash":"e462d1bf8e7965e8bf902e90ee110e4223a254d9cff509893b5ed06c02342ca43b4f10","first_seen":"2026-09-11T09:58:09.688226Z","last_seen":"2026-09-11T10:01:58.916956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/7446-34707013058f7ca0.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.950Z","timestamp":1789120878950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/7446-34707013058f7ca0.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7446-34707013058f7ca0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"eca9443f9c82eec8bc7bee59ad1433cf\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/7446-34707013058f7ca0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kxk5v-1789120878953-2dd7bc71cd37\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52440,"size_decoded":17917,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (52440), with no line terminators","md5":"eca9443f9c82eec8bc7bee59ad1433cf","sha1":"43f332e93d49f01522230dc2e92ecd9e14677d57","sha256":"d11351364f2d3779f60a3fcb8e29e128249cf4f2e8172ffd7cb7a96609347a62","sha512":"5a48a54e04b641cc68210f3c59cee680201ac4fc395889155c5a4eb6198c3959aca45251ffbf6d21016fa72fabfb6d435010993f9ea5df3229930900838c38b0","ssdeep":"768:/IfHuKJpSFD3SH2BsIPrt/AJOqfWrqy8PH:Suwz2BsUraE8PH","tlshash":"41331792731178ba9bdbc189a41b0080e1345ca0150d44bc7bf9adf6b9d76cda2eef74","first_seen":"2026-09-11T09:58:09.728985Z","last_seen":"2026-09-11T10:01:58.917552Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/layout-37d3a36d368accf8.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.958Z","timestamp":1789120878958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-37d3a36d368accf8.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-37d3a36d368accf8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"fdfa28f5b9874822858612962bd66872\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/layout-37d3a36d368accf8.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8zctv-1789120878961-eccf1f4ad0ae\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21496,"size_decoded":8030,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21349), with no line terminators","md5":"fdfa28f5b9874822858612962bd66872","sha1":"c4e25cc5bf315c4388f5d5a47de0b4a3db51c7dd","sha256":"9b3f07ac6e9199db454bf17f7d798b9ca028297b55e181bc57949d013ff2115f","sha512":"0b0815a987c826d0769cdc4c37a608dc9469157b4fffb27672718d6d02eeffda6bb2f5e6f07b3a6634f61cab512f71896e0694aa3c7d03fe20eb823553d88dda","ssdeep":"384:YB214WNJY1YQssmrD7yxL5TbcX5/LQL5TRJmouyYnw:YU14WNK1YQsVr75O0oDYnw","tlshash":"63a21b2682513fb4b02b3c809f4e5f4db19d5016c65989e5e8a59c1603d7ae0f2f2fde","first_seen":"2026-09-11T09:58:09.721899Z","last_seen":"2026-09-11T10:01:58.918282Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/css/8a39f563683ef9f7.css?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.942Z","timestamp":1789120878942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/css/8a39f563683ef9f7.css?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86819\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"8a39f563683ef9f7.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"9a98885f92516f523c656c00bd842cde\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/8a39f563683ef9f7.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t6zps-1789120878946-35ac1c23544d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1699,"size_decoded":1358,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1699), with no line terminators","md5":"9a98885f92516f523c656c00bd842cde","sha1":"f72e2c172759f8e4227c72c9d746ae9f5ea7bafe","sha256":"245b7c44d609fa7dbb3cc8c3aa1c7e92fe7f7b374b70ac6bff4c3d764c94af5c","sha512":"caef686ae1ffb548b6780ec792b45b60cc03f7ea3fd3bdabb3c88dde0d0028569c2cb042717a50d4912e8227f19a714bcfae2cb6c77c48dc9b801c3162a6ac73","ssdeep":"","tlshash":"723140039320356da366d46199e2d25ce062c307d9dbb5dcaad5270745c70ee1633f4c","first_seen":"2026-09-11T09:58:09.717365Z","last_seen":"2026-09-11T10:01:58.918919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/4bd1b696-77fcd6155feedb5e.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.945Z","timestamp":1789120878945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-77fcd6155feedb5e.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 6402\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4bd1b696-77fcd6155feedb5e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"bf4d38db17a7dc34794d02ac6ff8e53d\"\r\nlast-modified: Fri, 11 Sep 2026 08:14:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/4bd1b696-77fcd6155feedb5e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6fkt-1789120878948-1ea8ab7d91b9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168419,"size_decoded":55085,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf4d38db17a7dc34794d02ac6ff8e53d","sha1":"23813c33e1fbc549916dacd46c53f5a5a9334b8c","sha256":"da1c9803523e7a18f5f93419f7dbf9cab702b5a78564eb9dc0e18c32e492ae4f","sha512":"ced05478bba884f7920efc9ed9bbb7a639401e7d937620c971972b34fd73140284332891589d549dda27e63373149f61c887aa11013ad40335e5c55ad5082173","ssdeep":"3072:dtfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:dtfj2ld4Y40fUHQRE4","tlshash":"c4f3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","first_seen":"2025-04-18T12:16:34.472727Z","last_seen":"2026-09-11T10:25:31.668685Z","times_seen":4841,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/9089-371960bfcede7c5c.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.951Z","timestamp":1789120878951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/9089-371960bfcede7c5c.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9089-371960bfcede7c5c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: W/\"8cc9d14d35ae342cbea4cf4133cc5363\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/9089-371960bfcede7c5c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pq4hl-1789120878954-465e615f43f3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106115,"size_decoded":33559,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30559)","md5":"8cc9d14d35ae342cbea4cf4133cc5363","sha1":"abf30a141c6fe7a0155f2ba65279231043bf8e06","sha256":"ac0f1811656c4a3a95de68140068123b29b1406f58c75dc1f57162a295236350","sha512":"4fb4003fd773ba2dd1d2a2371c4dab7a4f269f7e6a0d5e532713c22e7d4412717455da1d90c1a513ee59e222fed3c1b5b7e0bed4e9d1e8b0eb6ff51f33c252c6","ssdeep":"1536:gbEfb5Vp7zGrsq9uPqP5doP5ARrplmzu4gxquYZttMEPnNsxNK+HO:HJqIqhI5q1xqVFH","tlshash":"eca30aa57b1075faded29595641f2050f139f892a18d005c72a8f8f72beacc899def30","first_seen":"2026-09-11T09:58:09.730003Z","last_seen":"2026-09-11T10:01:58.920003Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/auto?_rsc=3lb4g","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.512Z","timestamp":1789120879512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /auto?_rsc=3lb4g HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.robinhood-me.app/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nx-deployment-id: dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 130244\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"483635fcb9db4e144e9621cd78681342\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nx-matched-path: /auto.rsc\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8j5ct-1789120879515-d00ef794f613\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8355,"size_decoded":3046,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3411)","md5":"4ff74706b1439b643f09391daa698537","sha1":"a5a3730c6f63a5e69d2842f52e84d4ee63152e8c","sha256":"d415f7dbec130afd8841f61116e3ef65628c185468d625da956c3247fc1ca93c","sha512":"9f3373caba95a0325b481bfd9018f1dfe4fa3053585444fac495b0f127f73c14415da927d24ff705b4c1d68959b737c454d4a97066aae5b764cc6cca6e55924d","ssdeep":"192:Yog7QJ6155IAz/HNnyCRLzLl8NFYxXg+DzYVE:052MLnuAYVE","tlshash":"da02772b9645ac37ebeec0b7406f635a329e823757119877c7ad2d1e071806f2e46352","first_seen":"2026-09-11T09:58:09.691037Z","last_seen":"2026-09-11T10:01:58.920685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/config?projectId=6d6eaaf8a691406c303e729636736dfe\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.652Z","timestamp":1789120879652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:00:49 GMT","end":"Sun, 08 Nov 2026 22:59:47 GMT"},"fingerprint":{"sha1":"15:97:6F:D0:CA:06:44:96:61:32:37:0E:6F:F8:18:D9:4A:2B:26:7A","sha256":"46:81:16:FB:36:75:BF:3B:5A:92:EC:9A:72:40:8D:20:8E:D2:3B:25:2B:CA:42:6E:AC:75:29:DE:7E:74:F9:57"}}},"request":{"raw":"GET /appkit/v1/config?projectId=6d6eaaf8a691406c303e729636736dfe\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.robinhood-me.app/\r\nOrigin: https://www.robinhood-me.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=30\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a395d499f86b0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":595,"size_decoded":527,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1c3a4908ed2367c1c7aa4becb3405028","sha1":"38ae3e154b0c6327abe105b076013b1bbdfd6cc6","sha256":"b8dbbceec8a5443a9a13f936934d90172636d6481952765b2b803dbb876c208b","sha512":"2a169854233efc51af48e78395a576108b5b1dcd5a2cf741800bce6f2d55ac8f5acc922b1d3c6db9b188930bf103eebbcaa85e62f4d71071edc822275202b832","ssdeep":"","tlshash":"71f05427598c39dac546cd73d64397430fae4bb7ea05ed2cd81c9a0913deab11120d3b","first_seen":"2026-05-23T13:27:26.606318Z","last_seen":"2026-09-11T12:18:57.201369Z","times_seen":2529,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":12,"connect":15,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/icon.png?5fed022b96db1fd3","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.043Z","timestamp":1789120879043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /icon.png?5fed022b96db1fd3 HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 86817\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon.png\"\r\ncontent-type: image/png\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"adde23b571da6c09ce508d4e558145cb\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /icon.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2vpjm-1789120879046-390f9e278b64\r\ncontent-length: 219775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":219775,"size_decoded":220313,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"adde23b571da6c09ce508d4e558145cb","sha1":"98d4e1a31527070f478671d812fda0e03791573a","sha256":"69d7d1528b8d6f9227b3318ecc828559c605efa6c7428c22a6f83b93ec21d4ae","sha512":"18bda4cf89145ba73eba3ebb0eea40bf5840e49622eea1f3defeb0a73180acc8c22c678d54174b7cb412fa3bb6f8283508ad4924cc0eec9f1de2c12b33b6ab36","ssdeep":"6144:W50ehA/PSeKFDmFP+v3jKt+3xYJWJbE+0qKeoq3r:WueeXj+v3j0+3xoi0qKeokr","tlshash":"8d242373e12c61f226dd29eeb4afd8fea1594850d2546c2f3a2789d3fdb0d560e19028","first_seen":"2026-09-11T09:58:09.689535Z","last_seen":"2026-09-11T10:01:58.907336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/icon.png?5fed022b96db1fd3","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.044Z","timestamp":1789120879044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /icon.png?5fed022b96db1fd3 HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 86817\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon.png\"\r\ncontent-type: image/png\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"adde23b571da6c09ce508d4e558145cb\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /icon.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t6zps-1789120879047-74038ed43042\r\ncontent-length: 219775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":219775,"size_decoded":220313,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"adde23b571da6c09ce508d4e558145cb","sha1":"98d4e1a31527070f478671d812fda0e03791573a","sha256":"69d7d1528b8d6f9227b3318ecc828559c605efa6c7428c22a6f83b93ec21d4ae","sha512":"18bda4cf89145ba73eba3ebb0eea40bf5840e49622eea1f3defeb0a73180acc8c22c678d54174b7cb412fa3bb6f8283508ad4924cc0eec9f1de2c12b33b6ab36","ssdeep":"6144:W50ehA/PSeKFDmFP+v3jKt+3xYJWJbE+0qKeoq3r:WueeXj+v3j0+3xoi0qKeokr","tlshash":"8d242373e12c61f226dd29eeb4afd8fea1594850d2546c2f3a2789d3fdb0d560e19028","first_seen":"2026-09-11T09:58:09.689535Z","last_seen":"2026-09-11T10:01:58.907336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/sfx/win.mp3","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.511Z","timestamp":1789120879511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /sfx/win.mp3 HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6398\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"win.mp3\"\r\ncontent-range: bytes 0-48383/48384\r\ncontent-type: audio/mpeg\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"0c535cdc2449e211d3ce8368449669e1\"\r\nlast-modified: Fri, 11 Sep 2026 08:14:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /sfx/win.mp3\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pq4hl-1789120879514-5c534635e26a\r\ncontent-length: 48384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48384,"size_decoded":48960,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 96 kbps, 48 kHz, Monaural","md5":"0c535cdc2449e211d3ce8368449669e1","sha1":"f496bb94b94bff8581310d33ca557153445e7b90","sha256":"c16891a78c3106aa73a6b5c55a318ff6309a046e7bf0b063a8db680cc0117cda","sha512":"6d5bfb0caf5a315ec9ce3157c40f90ee89bc12ca99100cb70777e13bc5c8f78f38f078e28724f1781d383d24fb74af2b3926dbaca357e3c5dca22c2c73b9b829","ssdeep":"768:wENy/1kNpoR86n66MW7VpGlb55Lpz2E3KB7rXFCVL79b3NihneibYWWTgBpvEO:33o2F6TDGlt5LRjKB7rMVLHihneI+CcO","tlshash":"a523d0bdf1500362cd7dcab2bb8b50735a4bf700d64d688284f4927ae90672837975fa","first_seen":"2026-09-11T09:58:09.698788Z","last_seen":"2026-09-11T10:01:58.921898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/9631.cd05118d1a91fe12.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.099Z","timestamp":1789120879099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/9631.cd05118d1a91fe12.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9631.cd05118d1a91fe12.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"ad56c582db636180130465b9fe920077\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/9631.cd05118d1a91fe12.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kxk5v-1789120879103-4ae2c59c9e69\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":450949,"size_decoded":119067,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65484), with no line terminators","md5":"ad56c582db636180130465b9fe920077","sha1":"55f25680d0662d78fcfbd732d5642a47cd6b50b7","sha256":"ce7411ae63fc2d8af9eeffaf22cdee7fdabaeea42edffeaa18b37dd60614ae96","sha512":"77f2d690318b9175ebe83feceb536c47f6e63d0a4d5aab9735a2d10490305525e2a2391126f5958b6003dc0bf6fd5aa6535e81dd32dbbeb2002a17a491da625b","ssdeep":"6144:hrrRUkD/YmV2c3+YKYxRd9TcHi5icTWVTyDKKnTUiF0SXEO3XQY+Yu5VWtCpxxmg:vFDxcRycH/","tlshash":"b0a43c957376f43343da919ad42a1201f3395868140d842cf7b8ecefea9489896bff71","first_seen":"2026-09-11T09:58:09.697659Z","last_seen":"2026-09-11T10:01:58.922749Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/default.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.502Z","timestamp":1789120879502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/default.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6399\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"default.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: \"d38c530f0dd343abef6a0d061de2fb1e\"\r\nlast-modified: Fri, 11 Sep 2026 08:14:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/default.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pq4hl-1789120879505-de6e5a05e450\r\ncontent-length: 18518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18518,"size_decoded":19072,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d38c530f0dd343abef6a0d061de2fb1e","sha1":"4a5f9cf3521578a3196c77c1a8f5f3184742959b","sha256":"5bf5e1527d7125a934963e94a8841e9282866015c91914c582c0c53e65209e9d","sha512":"af7fc56c1f777f1f5e4b8156b5fdbc5ad98e2f2584bf1ddec6f315019ce3b7367ffa468d8fd599961b7653edbfc46ffa9e3588c32f5250f311615bd5eac2007f","ssdeep":"384:CckteyCJqO3wOOYHNZ7EBvkPlz+tEXRY7Bjgg7wV3jPWAXt+g9C1hviUHawkWd6T:Cvtey8eYHNZAiPliQC7Bly7R9+D1hvib","tlshash":"7882d12a5f8035312de12e7690c74ca8f7be9e1b077265f916a9646ccfce40d950e8c2","first_seen":"2026-09-11T09:58:09.713186Z","last_seen":"2026-09-11T10:01:58.923611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/avatars/johannkerbrat.webp","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:20.556Z","timestamp":1789120880556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /avatars/johannkerbrat.webp HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"johannkerbrat.webp\"\r\ncontent-type: image/webp\r\ndate: Fri, 11 Sep 2026 10:01:20 GMT\r\netag: \"aa77c8b30bfed5e6ea0a704f896ab9de\"\r\nlast-modified: Fri, 11 Sep 2026 09:57:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /avatars/johannkerbrat.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lzgp2-1789120880560-74fc9f97c3a2\r\ncontent-length: 13458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13458,"size_decoded":14023,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa77c8b30bfed5e6ea0a704f896ab9de","sha1":"473864a843d3e47bd1bfc21f80007b5979e06687","sha256":"2749a56eb3a12dba93201703cbbe55de10fa2d65b5f1b4271e3a3ff8164fd6d3","sha512":"28edd8511a83d3239a2695727267c3851d6cc0525cf410c8faeade1a64395e3edbf97145362a5e76b4df200ffc59731a5674f185dea765c199bfb3bd3a7c148a","ssdeep":"192:kZlpgk4dotusOdBcAQ8qIZOvsmLY45QNqG0ng6dKXxRT+B6p3B5jExA/so:kzLVLOc8ROxE00/EPdKhRTf5jmRo","tlshash":"0252c050858e9320973654b14d6103b517a022cb82cfd68e3fd921433977ee4eabd2cd","first_seen":"2026-09-11T09:58:09.68699Z","last_seen":"2026-09-11T10:01:58.924291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/main-app-d41d56f775a954bb.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:18.947Z","timestamp":1789120878947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/main-app-d41d56f775a954bb.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-d41d56f775a954bb.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:18 GMT\r\netag: \"414540b9292b7b7033e3181891eb3123\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/main-app-d41d56f775a954bb.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m9tjl-1789120878951-049f4563a9d4\r\ncontent-length: 534\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":534,"size_decoded":1156,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (534), with no line terminators","md5":"414540b9292b7b7033e3181891eb3123","sha1":"72d64b9ff282371843b56ad7dd1fc9f21886aea7","sha256":"d1aaa16fccf97b73a68c8d0cc6de16c4e49e29dfd4e5bd675f6c37465fd9a569","sha512":"aa79e160fec24d63a04754d192b181963fafc01482815f52325daa92dcba9c11a20bbc606258c82a2c534cc2ead5539770c2c80681c311811f267cd1efebd399","ssdeep":"","tlshash":"f7f0f4aa5f0df42f1c26ae74fd97ace2285f4175202b4e647901eda53c27face260418","first_seen":"2025-05-06T10:44:19.333955Z","last_seen":"2026-09-11T10:01:58.925305Z","times_seen":648,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.robinhood-me.app/_next/static/chunks/app/tasks/page-21c773e4051e07b2.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd","fqdn":"www.robinhood-me.app","domain":"robinhood-me.app","tld":"app"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.robinhood-me.app/","date":"2026-09-11T10:01:19.573Z","timestamp":1789120879573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robinhood-me.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 13:55:54 GMT","end":"Sun, 29 Nov 2026 13:55:53 GMT"},"fingerprint":{"sha1":"B3:73:DC:00:A7:BD:F8:63:DE:EB:90:BB:A8:5E:7E:85:65:2D:51:B0","sha256":"96:D9:1E:B7:37:77:9C:2B:DD:72:05:06:09:2B:1C:DE:62:0B:77:A3:F9:A5:52:97:CB:04:AD:DD:CD:0E:BE:62"}}},"request":{"raw":"GET /_next/static/chunks/app/tasks/page-21c773e4051e07b2.js?dpl=dpl_xJeMQe1g5xeDVMdZ6NWQsBKPPJfd HTTP/1.1\r\nHost: www.robinhood-me.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.robinhood-me.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 86818\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-21c773e4051e07b2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:01:19 GMT\r\netag: W/\"872a10824f7cd1b57380f406a2abd914\"\r\nlast-modified: Thu, 10 Sep 2026 09:54:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/tasks/page-21c773e4051e07b2.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8j5ct-1789120879579-cc99d68a7085\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":19278,"size_decoded":5979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19170), with no line terminators","md5":"872a10824f7cd1b57380f406a2abd914","sha1":"4e2117abbe871bbc88f9a1675b4ac7deca50ef42","sha256":"bc6cb83d4ea6461b69c050634eeece6a946020f3ce141da5ce9a17c08882cb20","sha512":"4db4942833a6d6c9227f52027b9b759aabe0ce77b605bd73dc2fdce9d87f8450a0058e71c3bfaa4021dfc644172d8f49d6038ba20d4aa6290f33c2fdd9e99676","ssdeep":"384:SL5T8c9YNLQL5ThEZOrm5k6JvDV2fMwTSLM3BA48p5:8Y4JrCkCvDVuBA7P","tlshash":"9082b837d0912b5c70369ca40789ce7db29e4626992dc2e499f53c2607cf1dbba6238d","first_seen":"2026-09-11T09:58:09.701291Z","last_seen":"2026-09-11T10:01:58.926041Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"www.robinhood-me.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}